mirror/ ansible-nginx-hardening
1
0
Fork 0
mirror of https://github.com/dev-sec/ansible-nginx-hardening.git synced 2024-05-24 18:26:25 +02:00
Code Issues Releases Activity

imove chmod to end because of generated files (#31) 

Signed-off-by: Martin Schurz <Martin.Schurz@t-systems.com>
This commit is contained in:
schurzi 2020-08-24 11:22:33 +02:00 committed by GitHub
parent 29a43568e6
commit 57f7a15b51
Signed by: GitHub
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 8 additions and 8 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

16
tasks/main.yml
View File

@ -1,12 +1,4 @@
---
- name: config should not be worldwide read- or writeable
file:
path: "/etc/nginx"
mode: "o-rw"
owner: "root"
group: "root"
recurse: true
- name: create additional configuration
template:
src: "hardening.conf.j2"
@ -97,3 +89,11 @@
args:
creates: "/etc/nginx/dh{{ nginx_dh_size }}.pem"
notify: restart nginx
- name: config should not be worldwide read- or writeable
file:
path: "/etc/nginx"
mode: "o-rw"
owner: "root"
group: "root"
recurse: true